Amass API is a Flask-based web application for automated domain enumeration using OWASP Amass.
338
Amass API is a Flask-based web application designed to interact with OWASP Amass, enabling domain enumeration via a simple REST API. For example, this API can be used by cybersecurity professionals to automate the discovery of subdomains during penetration testing, saving time and effort compared to manual methods. It provides options for recursive enumeration and brute-forcing subdomains, with results saved in a structured format.
You can use the prebuilt Docker image from Docker Hub to quickly deploy the API:
docker pull enrikenur/amass-api
Follow these steps to set up the application:
git clone https://github.com/w95/amass-api &&
cd amass-api
docker-compose up --build
http://localhost:5000./api/amass/enum (POST)Trigger a domain enumeration.
| Parameter | Type | Required | Description |
|---|---|---|---|
domain | String | Yes | The target domain for enumeration. |
brute | Boolean | No | Enable brute-forcing of subdomains. Default: false. |
min_for_recursive | Integer | No | Minimum number of findings to trigger recursion. Default: 2. |
{
"domain": "example.com",
"brute": true,
"min_for_recursive": 2
}
{
"status": "success",
"message": "Amass enumeration completed.",
"output": [
"subdomain1.example.com",
"subdomain2.example.com"
]
}
{
"status": "error",
"message": "Domain is required"
}
This project is licensed under the MIT License. See LICENSE for more details.
Contributions are welcome! Please fork the repository and submit a pull request with your changes.
Content type
Image
Digest
sha256:b484313ff…
Size
64.9 MB
Last updated
over 1 year ago
docker pull enrikenur/amass-api